Attackscott Ferguson News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Get Permission Researchers with Microsoft and FireEye are disclosing additional malware used by the hacking group that targeted SolarWinds in December 2020, according to a pair of reports released Thursday. The newly discovered malware appears to be second-stage payloads deployed by the hacking group after victimized organizations downloaded a Trojanized software update to SolarWind's Orion network monitoring platform, which contained a backdoor dubbed "Sunburst," the reports note. While about 18,000 of the company's customers downloaded the compromised software update, the attackers only de...

Get Permission Researchers with Microsoft and FireEye are disclosing additional malware used by the hacking group that targeted SolarWinds in December 2020, according to a pair of reports released Thursday. The newly discovered malware appears to be second-stage payloads deployed by the hacking group after victimized organizations downloaded a Trojanized software update to SolarWind's Orion network monitoring platform, which contained a backdoor dubbed "Sunburst," the reports note. While about 18,000 of the company's customers downloaded the compromised software update, the attackers only de...

(Source: Mike via Flickr) The SolarWinds supply chain attack should prompt federal agencies and others to rethink how they approach security issues - especially identity and access management, according to a breakdown of the attack presented this week by the National Institute of Standards and Technology and the U.S. Cybersecurity and Infrastructure Security Agency. At NIST's Information Security and Privacy Advisory Board meeting, Jay Gazlay, a technical strategist with CISA who has been examining the attack since it was first disclosed in December 2020, presented an analysis of what the ag...

A pair of U.S. House committees held their first public hearings into the SolarWinds attack, with lawmakers and witnesses offering support for expanding federal

A zero-day attack is affecting SonicWall's SMA 100 series gateway products. (Source: SonicWall) Security vendor SonicWall is investigating what the company calls a "coordinated attack" against its internal network by threat actors using a zero-day exploit within the company's remote access products. In a brief statement, SonicWall says it is continuing to investigate the incident and that users of certain versions of its Secure Mobile Access, or SMA, gateway products should apply temporary fixes until a permanent patch is available. And while SonicWall did not release details about the zero-d...